Vulnerability in Apple Mac Os X

CVE-2002-0676

SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates.

EPSS: 0.043 (90.1th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x — versions 10.1, 10.1.1, 10.1.2
N/a — versions n/a

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)